WordPress.WP.AlternativeFunctions.curl_curl_exec

curl curl exec

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101Seraphinite Accelerator2259425550k+Output is not escaped
#102ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044799300k+Non-prefixed global variable
#103SSL Zen — SSL Certificate Installer & HTTPS Redirects227791,57510k+Non-prefixed global variable
#104Theme Editor2279868550k+Output is not escaped
#105Customize Feeds for Twitter22921714k+Non-prefixed global variable
#106RapidLoad AI – Optimize Web Vitals Automatically2281840800Nonce verification recommended
#107Welcart e-Commerce2210,37710,89610k+Text Domain Mismatch
#108WCFM Marketplace – Multivendor Marketplace for WooCommerce221,9371,96910k+Non-prefixed global variable
#109WCFM Membership – WooCommerce Memberships for Multivendor Marketplace2255967510k+Non-prefixed global variable
#110Simple Shopping Cart2279653610k+Unsafe printing function
#111Asset CleanUp: Page Speed Booster222,0302,485100k+Non-prefixed global variable
#112WP Easy Pay – Payment and Donation form Builder for Square228931,8281k+Non-prefixed global variable
#113WP Express Checkout (Fast Payments via PayPal & Stripe)225916271k+Output is not escaped
#114File Manager227405201m+Unsafe printing function
#115WP Fusion Lite – Marketing Automation and CRM Integration for WordPress222766835k+Nonce verification recommended
#116WP Umbrella: Update Backup Restore & Monitoring2291891670k+Exception output is not escaped
#117Wp-Insert2226730110k+Output is not escaped
#118AidWP – Donation & Payment Forms (Stripe Powered)221,3171,675800Non-prefixed global variable
#119WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript221642579k+Non-prefixed constant
#120NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce221,3531,4122k+Non-prefixed global variable
#121WP-WebAuthn229573962k+Exception output is not escaped
#122WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell225,9962,7905k+Text Domain Mismatch
#123WPSSO Core – Complete Schema Markup and Meta Tags221,4074125k+Missing Translators Comment
#124YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception output is not escaped
#125Recipe Cards For Your Food Blog from Zip Recipes221,1261,7311k+Non-prefixed global variable
#126Affiliate Super Assistent231,2802672k+Text Domain Mismatch
#127B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More231,34740910k+Text Domain Mismatch
#128BlossomThemes Email Newsletter2333723920k+Output is not escaped
#129Booking calendar, Appointment Booking System231,0791,1254k+Output is not escaped
#130Business Directory Plugin – Easy Listing Directories for WordPress236111,05810k+Non-prefixed global variable
#131Captivate Sync231745571k+Non-prefixed global variable
#132WPBot – AI ChatBot for Live Support, Lead Generation, AI Services232641,0385k+Non-prefixed global variable
#133Church Admin231,6434,202900Direct Query
#134Classified Listing – AI-Powered Classified ads & Business Directory231552,0749k+Non-prefixed global variable
#135Content Egg – Affiliate Product Importer & Price Comparison231,2311,25710k+Non-prefixed global variable
#136Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe239,31026,6421k+Non-prefixed global variable
#137Currency Exchange for WooCommerce23703502500Output is not escaped
#138DK PDF – WordPress PDF Generator237443353k+Exception output is not escaped
#139Easy Digital Downloads – eCommerce Payments and Subscriptions made easy233,72310,28340k+Non-prefixed namespace
#140Essential Real Estate235295,0608k+Non-prefixed global variable
#141Export WordPress Pages to Static HTML & PDF — Static Site Export234903015k+Text Domain Mismatch
#142Ezoic2343251610k+Output is not escaped
#143Fastcache by Host.it231,327203600Text Domain Mismatch
#144Feed Them Social – Social Media Feeds, Video, and Photo Galleries2356353520k+Output is not escaped
#145Flexmls® IDX Plugin231,2689571k+Output is not escaped
#146Tracking and Consent Manager – WP Full Picture231,2803,2233k+Non-prefixed global variable
#147FV Flowplayer Video Player231,3111,45420k+Output is not escaped
#148GAinWP Google Analytics Integration for WordPress235251768k+Output is not escaped
#149Houzez Property Feed231,4641,6151k+Text Domain Mismatch
#150Iks Menu – WordPress Category Accordion Menu & FAQs236151,29310k+Non-prefixed global variable